FastFinder - Incident Response - Fast Suspicious File Finder

FastFinder is a lightweight tool made for threat hunting, live forensics and triage on both Windows and Linux Platforms. It is focused on endpoint enumeration and suspicious file finding based on various criterias:

• file path / name
• md5 / sha1 / sha256 checksum
• simple string content match
• complex content condition(s) based on YARA

Ready for battle!

• fastfinder has been tested in real cases in multiple CERT, CSIRT and SOC use cases
• examples directory now include real malwares / suspect behaviors …

dfir fast finder incident incident response response threat hunting windows yara